Github user nickwallen commented on the pull request:
https://github.com/apache/incubator-metron/pull/119#issuecomment-219048690
For some reason, I cannot comment on the original JIRA, so I will comment
here.
I think using a custom created language for this purpose is going to be
confusing for our users. Most network tools support what is called Berkely
Packet Filter (BPF) syntax. The user community is going to be fairly familiar
with this syntax. I would suggest that we use BPF syntax for this purpose.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---